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A Method and Apparatus for Detection of a Speckle Based Physically Unclonable Function 



This invention relates to a method and apparatus for detection of a speckle 
based physically unclonable function for use in , for example, cryptographic applications. 

Information security requires a mechanism that provides significant 
asynunetry in the effort required to make intended and unintended use of encoded 
5 information. Such protection is growing in importance as an increasing fraction of economic 
activity is commimicated electronically; sending credit card numbers over the Internet or 
spending money stored in a smart card's memory assumes that this data cannot be easily 
duplicated. 

Modem cryptographic practice rests on the use of one-way functions. These 

10 are functions that are easy to evaluate in the forward direction but infeasible to compute in 
the reverse direction without additional mformation. Although algorithmic one-way functions 
are widely used, they are facing a number of challenges, which can be addressed by usmg 
coherent multiple scattering fi-om inhomogeneous structures rather than number tiieoiy. to 
implement one-way functions. 

15 Laser speckle fluctuations are a familiar demonstration of the sensitivity of the 

scattering of coherent radiation to the structure of inhomogeneous media. Because any 
changes in the microstructure of a disordered mediimi cause an order unity change in its 
speckle pattem, a discretely sampled image of speckle intensity provides a fixed-length key 
that hashes tiie specification of the 3D spatial distribution of scatterers. 

20 A known approach to solving the problems associated with algorithmic one- 

way functions is the use of physical random functions or physical imclonable functions 
(PUF), which are essentially random functions bound to a physical device in such a way that 
it is computationally and physically infeasible to predict the oxitput of the function without 
actually evaluating it using the physical device. 

^5 Hius, the present invention relates to physically unclonable functions (PUF's) 

based on speckle patterns. In a known system, an object that scatters light strongly is 
illuminated with a coherent light source (e.g. a laser) of wavelength A. The input beam with 
beam radius a may be modified with a spatial light modulator (SLIV^ which gives the beam a 
checkerboard light pattem of varying amplitude and/or phase. This checkerboard pattem is 
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fully blurred when the beam has traversed the scattering structure. A pixelated detector (for 
example, CCD or CMOS device) is placed a distance z behind the scattering structure and 
records the so-called speckle pattern. 

The speckle pattern consists of random bright and dark patches. The scattering 
5 structure is a physical function mapping challenges to responses. The structure is 

manufactured in such a way that a duplicate cannot be made, hence the unclonability. For 
example, the structure may comprise a layer with randomly dispersed particles of a different 
refractive index than the host medium. In short, the scattering structure is an embodunent of a 
PUF, and it will be appreciated that PUF's can be applied in cryptographic and cryptologic 
10 systems, as set out in detail by Ravikanth Pappu, et al. Physical One-Way Functions, Science 
297, p2026 (2002). 

When the pixels of the pixelated detector are much larger than the typical size 
of the bright and dark patches of the speckle pattern, the intensity will average out and 
relevant information will be lost, resulting in deteriorated use of the PUF. On the other hand, 
15 when the pixels are much smaller than the typical size of the bright and dark patches of the 
speckle pattern, adjacent pixels record essentially the same information. This redundancy is 
not a fundamental problem, but it has the adverse effect of increasing processing 
requirements. 

It is therefore an object of the present invention to provide an optical method 
20 and apparatus in which criteria are employed to determine the size of the pixels of the 

detector that will give rise to detection of all relevant bits (i.e. the pixels are small enough) 
without too much redundancy (i.e. the pixels are large enough). 

Thus, in accordance with the present invention, there is provided optical 
apparatus comprising an optical system for providing a coherent radiation source, a strongly 
25 scattering object located in the path of said coherent radiation, and a pixelated photo-detector 
for detecting a speckle pattern incident thereon, said speckle pattern being produced by said 
said coherent radiation being incident on said strongly scattering object, wherein the size of 
the pixels of said photo-detector is determined by the location ttiereof in said optical 
apparatus relative to said strongly scattering object and is set at substantially the same size as 
30 that of bright and dark patches present in said speckle pattern as determined by 3L/NA, where 
X is the wavelength of said coherent radiation, and NA is the numerical ^erture of said 
optical system. 

Also in accordance with the present invention, there is provided a method of 
detecting a speckle pattern, comprising irradiating a strongly scattering object with coherent 
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radiation and providing a pixelated photo-detector for receiving the resultant speckle pattern, 
wherein the size of the pixels of said photo-detector is determined by the location thereof 
relative to said strongly scattering object and is set at substantially the same size as that of 
bright and dark patches present in said speckle pattern as determined by X/NA, where A, is ttie 
5 wavelength of said coherent radiation, and NA is the numerical aperture of said optical 
system. 

In one exemplary embodiment of the present invention, the optical system 
comprises a coherent radiation source for providing a coherent radiation beam of radius a, the 
photo-detector being located a distance z from said strongly scattering object, wherein 

10 ^K-alz, In an alternative exemplary embodiment of the present invention, the optical system 
may comprise a coherent radiation source for providing a coherent radiation beam having a 
radius a, and one or more converging optical elements having a focal length/ such as a lens 
or the like, in the path of the coherent radiation beam between the strongly scattering object 
and the photo-detector, wherein NA=a^ In this case, the one or more optical elements are 

15 locatedadistance V from the strongly scattering object and a distance from the photo- 
detector, wherein 1/v + 1/6 =1// 

In both cases, a spatial light modulator may be provided between the strongly 
scattering object and the coherent radiation source. One or more elements with optical power 
(that is to say the ability to refract light), such as a lens or the like, may also be provided in 

20 the radiation path between the strongly scattering object and the coherent radiation source. 
Preferably, the formation of a speckle pattern by the strongly scattering object is an 
implementation of a physically unclonable function. 

Beneficially, the pixels of the photo-detector are at least smaller than 
T|maxA/NA, where Tjmax is a number in the range 1 to 20, more preferably 1 to 10, and even 
25 more preferably 5 to 10. In one specific embodiment of the invention, rimax may be 5. 

Similarly, the pixels of the photo-detector are preferably larger than TimmAyNA, where Tiniin is 
a number between 0 and 2, more preferably between 0 and 1, and even more preferably 
between 0.05 and 0.5. In one specific embodiment of the present invention, T|mm may be 0.05, 

30 

These and other aspects of the present invention will be apparent from, and 
elucidated with reference to, the embodiments described herein. 

Boibodiments of the present invention will now be described by way of 
examples only and with reference to the accompanying drawings, in which: 
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Figure 1 is a schematic diagram illustrating optical apparatus according to a 
first exemplary embodiment of the present invention; 

Figure 2 is a graphical representation of the normalised intensity probability 
distribution in respect of the apparatus of Figure 1; and 

Figure 3 is a schematic diagram illustrating optical apparatus according to a 
second exemplary embodiment of the present invention. 



Thus, as stated above, it is an object of the present invention to provide an 
10 optical method and ^paratus in which criteria are employed to determine the size of the 
pixels of the detector that will give rise to detection of all relevant bits (i.e. the pixels are 
small enough) without too much redundancy (i.e. the pixels are large enough). In practice, 
however, the size of the pixels may be fixed, and it is the distance between the PUP and the 
, detector which is varied in order to match pixel size to speckle patch size. 
15 Thus, the present invention has as its aim to make the pixels comparable in 

size to the bright and dark patches of the speckle pattern. The typical size of these patches has 
been found to be A^/o, provided that a is much smaller than z, which is likely to be the case, 
in practice. 

The maximum size of the pixels may be estimated using the sampling theorem 
20 of band-Iunited functions. If z is suflBciently large, the field at the detector plane is the 

Fourier-transform of the field at the exit surface of the PUF. This regune is known as the fer- 
field or Fraimhofer diffraction regime. In that case, the highest spatial fi-equency of the field 
at the detector turns out to be al%z. According to the Nyquist criterion, it is then necessary to 
sample the signal with at least twice this spatial fi-equency bandwidth, which implies that the 
25 pixels should be spaced at a distance 'kzlla or less. In practice, pixels have a finite size and 
thus do not measure the intensity at a point but instead measure the average intensity over the 
pixel area. 

The effect of averaging over the pixel area may be estimated fi-om the 
probability distribution of the intensity. According to J. W. Goodman, Statistical Properties of 
30 Laser Speckle Patterns (in Laser Speckle and Related Phenomena, J.C. Dainty ed., Springer- 
Verlag, 1975), the probabiUty density to measure a normalised mtensity x = I/Io, where I is 
the intensity and lo tiie average intensity is given by: 
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r(Af) 



Where M is approximately related to the pixel area Sm by: 



Af «l + ^ 



Where Sc « Q^/a)\ the typical area of a speckle patch. Fxirthermore, r(M) is 
the so-called gamma-function, defined by: 

00 

10 r(AO = Jdf exp[-/] 

0 

The probability function is illustrated in Figure 2 of the drawings for 
Af=l,0025 (the e;q)onentially decaying function), (the peaked function), and il4^1.25 
(the intermediate, nearly e>q}bnentially decaying function). These cases correspond to pixel 
15 size of 1/10, 10 and 1 times the Nyquist sampling frequency, respectively. Clearly, for small 
pixel areas, the distribution is relatively smooth, whereas for large pixel areas it is more 
peaked around the average value, approaching a Gaussian distribution in tiie limit of very 
large pixel area values. 

As shown, therefore, the intensity probability distribution is a relatively 
20 smooth distribution for small pixel area values and a sharply peaked distribution for large 
pixel area values. As the measurement of intensity is always noisy, it follows that there must 
be an upper limit for M above which the width of the peaked distribution is indistinguishable 
from the noise. Clearly, in order to extract all useful bits, it is necessary to stay well below 
this upper limit. 

25 As an example, may be taken as a tentative upper limit for the pixel size. 

The lower limit below which a decrease in pixel size no longer increases the amount of useful 
bits follows from the value for Af below which the probability distribution hardly deviates 
from the value in the limiting case Af=l, In one exemplaiy embodiment, O.OSAz/a may be 
taken as a tentative lower limit for the pixel size. 
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Referring to Figure 1 of the drawings, an optical arrangement according to a 
first exemplary embodiment of the present invention is illustrated, which arrangement is 
referred to herein as *fi-ee space geometry'. An alternative embodiment is referred to herein 
as 'imaging geometry', in which the exit surface of the PUF and the detector are in conjugate 
5 planes of a lens, or more generally, an optical system. Li the fi-ee space geometry of Figure 1, 
it is possible to define NA=a/z, thereby making the speckle patch size X/NA. The 
arrangement comprises a source 1 emitting a coherent light beam 2 of wavelength X, a lens 3 
converging the beam 2 to a beam of radius a, an SLM 4 imposing a checkerboard pattern on 
the beam, a PUF 5, and a pixelated detector 6 placed a distance z behind the PUF. 

10 Referring to Figure 3 of the drawings, an alternative exemplary embodiment 

of the present invention is further supplemented with an additional lens 7 with focal length^^ 
placed a distance v behind the exit surface of the PUF and a distance h in fiont of the 
detector, where l/v+ Mb = 1// i.e. the detector is placed in the image plane of the exit 
surface of the PUF. As explained above, in this exemplary embodiment of the present 

15 invention, the exit surfece and ttie detector are in conjugate planes of a lens 7, or more 

generally, an optical system. Conjugate planes means that the two planes are the object and 
the image planes of each other. The typical size of the patches in the speckle pattern is once 
again A/NA, where the numerical aperture is defined as NA=a^ where a is the beam radius 
at the lens and /is the focal length of the lens ^provided that a is much smaller than/ i.e. it 

20 holds only for small NA values). 

Other exemplary embodiments of the invention, for example, with an optical 
unaging system precedmg the PUF, are also conceivable. 

Thus, in simmiary, the present invention provides an optical arrangement of at 
least a coherent light source, a strongly scattering object (the PUF), and a pixelated photo- 

25 detector, wherein the pixels are comparable in size with the bright and dark patches of the 
speckle pattern. Quantitively, as explained above, the pixel size should be roughly A/NA, 
where X is the wavelength, and (i) NA=a/2 for the fi-ee-space geometry described above, with 
a being the beam radius and z being the distance between the exit surface of the PUF and the 
pixelated detector, or (ii) NA is the numerical aperture of the lens 7 in the imaging geometry 

30 described above. In a preferred embodiment of the invention, there are tentative requirements 
that the pixels should be at least smaller than iimaxAyNA and preferably larger than TiminAyNA, 
where ilmax=5 and T|niin=0.05. It will be understood by a person skilled in the art that the 
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present invention is concerned with the optical arrangement of the PUF and the photo- 
detector, rather than the photo-detector^er se. 

It should be noted that the above-mentioned embodiments illustrate rather than 
limit the invention, and that those skilled m the art will be capable of designing many 

5 alternative embodiments without departing from the scope of the invention as defined by the 
appended claims. In the claims, any reference signs placed in parentheses shall not be 
construed as limiting the claims. The word "comprising" and "comprises", and the like, does 
not exclude the presence of elements or steps other than those listed in any claim or the 
specification as a whole. The singular reference of an element does not exclude the plural 

10 reference of such elements and vice-versa. The invention may be implemented by means of 
hardware comprising several distinct elements, and by means of a suitably programmed 
computer. In a device claim enumerating several means, several of these means may be 
embodied by one and the same item of hardware. The mere feet that certain measures are 
recited in mutually different dependent cldms does not indicate fliat a combination of these 

15 measures cannot be used to advantage. 



